Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
File:                     5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer (raw, json)
Hash identifier:          949oD7okNiZ1TAJ8Csbt9QiUBld6TyCj2eSNf6zcy0c=
Subject key identifier:   E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01942825F6A97C1C1E7210B33E6AB9738D06
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 17:52:44 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 45.13.96.0/22
                          IP: 2a0e:e300::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:f6:a9:7c:1c:1e:72:10:b3:3e:6a:b9:73:8d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 17:52:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:3a:1a:4a:ed:4e:48:a4:73:cd:9f:b9:7e:
                    8a:f9:0c:78:73:f8:d5:35:12:e0:c6:14:44:e5:31:
                    a3:de:19:20:78:a9:57:c2:c5:39:1a:25:ab:a9:e6:
                    fe:19:b5:b5:e2:47:31:16:ce:bb:18:0a:a7:06:48:
                    a0:22:1e:b0:54:ae:4a:13:56:19:71:96:7e:22:ce:
                    48:61:ad:a9:ff:2e:50:79:0b:a1:78:ef:37:d9:77:
                    47:aa:cd:3f:20:d6:ce:6d:52:49:cf:be:ac:53:15:
                    a8:bc:8b:5c:18:c1:92:91:c5:e1:b3:36:4a:36:fc:
                    2c:a8:47:6a:2a:98:8c:2e:ba:ad:4a:9c:0d:92:77:
                    96:a9:22:11:9d:73:3c:82:28:a9:bf:37:91:13:e0:
                    f4:be:1a:f2:75:30:cb:fd:3f:f9:f6:45:d4:b6:58:
                    5a:2e:4d:5b:c0:92:89:4f:dd:a3:7a:5f:7d:67:1b:
                    9f:3e:33:c5:7d:51:d9:48:b9:36:c7:a5:da:d0:8a:
                    7b:4c:7d:85:cf:a2:e1:8f:a0:a3:47:ee:23:db:8e:
                    d3:7a:e7:b8:e1:3f:27:5a:8f:89:c1:ab:39:3c:87:
                    71:07:0e:20:79:07:0a:23:f3:74:e7:74:2e:a1:59:
                    8a:3b:4d:a0:af:71:86:2c:64:50:d8:54:57:11:8b:
                    22:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.96.0/22
                IPv6:
                  2a0e:e300::/29

    Signature Algorithm: sha256WithRSAEncryption
         30:ba:bd:0e:59:33:96:15:6a:dc:5c:bb:97:ee:96:26:62:bb:
         fb:a4:f7:44:7b:88:fe:d2:04:a7:fb:a4:2e:11:50:19:ac:2a:
         78:ae:f2:2f:fe:fc:1b:ea:e9:45:9e:3f:c7:04:3a:32:3d:86:
         13:b8:ae:f6:7f:35:17:15:81:d0:e0:13:64:ab:36:0a:df:81:
         a4:5b:c3:75:b2:91:d3:c5:fe:cc:23:69:6e:db:63:a8:de:ad:
         b4:93:e8:68:54:98:f8:c6:5a:b1:31:34:bf:be:c1:c6:47:d2:
         61:88:79:3f:37:f8:e3:c1:20:f9:ef:1c:6f:2b:19:62:e8:db:
         5f:98:39:51:c5:9a:04:4e:75:5d:cf:b6:d8:8a:ad:c2:e2:2c:
         17:c0:f5:d8:5a:b5:92:84:e8:f7:17:6e:f2:a8:e8:33:54:a5:
         74:00:8d:f0:e3:3f:35:a5:5d:b2:e0:f3:4d:e7:72:72:57:8c:
         aa:64:5c:84:ab:de:60:fa:7b:d2:39:1e:a6:e4:a5:9f:ff:13:
         c5:2b:b6:b9:6f:3e:99:27:66:58:bc:f7:31:8b:ed:21:a4:c1:
         0f:0a:8a:eb:d7:9b:12:28:ca:b3:89:b4:89:ac:63:76:11:86:
         a9:c7:0a:40:cf:62:cb:33:81:d3:e6:85:97:90:5b:79:af:e9:
         f1:c2:6f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----